Trojan.DownLoader6.19648

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%HOMEPATH%\Windows\UpdateOffice.exe

Вредоносные функции:

Создает и запускает на исполнение:

%HOMEPATH%\PrintHood\UpdateOffice.exe
%HOMEPATH%\Windows\UpdateOffice.exe

Запускает на исполнение:

<SYSTEM32>\ping.exe 174.142.57.28
<SYSTEM32>\cmd.exe /c ""%HOMEPATH%\PrintHood\pangtip.bat" "
<SYSTEM32>\cmd.exe /c ""%HOMEPATH%\PrintHood\700.bat" "

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\PrintHood\GGIhY9gpmD.PRI
%HOMEPATH%\PrintHood\oPVmEllXOR.PRI
%HOMEPATH%\PrintHood\aIORNFLOfw.PRI
%HOMEPATH%\PrintHood\aRgx9SM9mL.PRI
%HOMEPATH%\PrintHood\U7LPPS36sF.PRI
%HOMEPATH%\PrintHood\xeS7vnTHiD.PRI
%HOMEPATH%\PrintHood\0dwUAtcYlP.PRI
%HOMEPATH%\PrintHood\9rJHFfo9Hi.PRI
%HOMEPATH%\PrintHood\jLC5jj9sMj.PRI
%HOMEPATH%\PrintHood\~cIzwk5RPKKP704y7VKps.TMP
%HOMEPATH%\PrintHood\~MGge4o2RHV3dRUYJj7Qe.TMP
%HOMEPATH%\PrintHood\~wknm9lmV0weEWYqvOzFq.TMP
%HOMEPATH%\PrintHood\~BMqmGJ6dJOwHYsiL8giF.TMP
%HOMEPATH%\PrintHood\~HAba6VDpaeK8Icbi44zx.TMP
%HOMEPATH%\PrintHood\~BXhcADQBdNZZDhWvoQFl.TMP
%HOMEPATH%\PrintHood\~fiXdctZwwfcmP5he8RHD.TMP
%HOMEPATH%\PrintHood\~u8glJluiIXCkxgbIjsTY.TMP
%HOMEPATH%\PrintHood\~YgXwU2y01qdbhYtcM2SN.TMP
%HOMEPATH%\PrintHood\~DCOJhAb3dxOECJmNYD4N.TMP
%HOMEPATH%\PrintHood\D7hEbRzM9z.PRI
%HOMEPATH%\PrintHood\g6pIuDIbDU.PRI
%HOMEPATH%\PrintHood\W6mgezUDyP.PRI
%HOMEPATH%\PrintHood\CXHb7Ck6tc.PRI
%HOMEPATH%\PrintHood\asN0a1vSU2.PRI
%HOMEPATH%\PrintHood\ruKXdWMeyd.PRI
%HOMEPATH%\PrintHood\D2OTeaMZlW.PRI
%HOMEPATH%\PrintHood\qS61hkKAy7.PRI
%HOMEPATH%\PrintHood\9YFuXAe43o.PRI
%HOMEPATH%\PrintHood\55vFY10arU.PRI
%HOMEPATH%\PrintHood\1mBIS4aBSH.PRI
%HOMEPATH%\PrintHood\Y97r93XFrZ.PRI
%HOMEPATH%\PrintHood\tFhgPGt9xa.PRI
%HOMEPATH%\PrintHood\yPheX1KzOS.PRI
%HOMEPATH%\PrintHood\ZeKMoEVTih.PRI
%HOMEPATH%\PrintHood\8UR6qnNKc9.PRI
%HOMEPATH%\PrintHood\El7mmBv6Fo.PRI
%HOMEPATH%\PrintHood\FgMhfEOb6e.PRI
%HOMEPATH%\PrintHood\Te2ehJMBiB.PRI
%HOMEPATH%\PrintHood\~D5aHikMaULQ7Nl0g4Atr.TMP
%HOMEPATH%\PrintHood\~KgECKCsz1dtYtxgzUXYB.TMP
%HOMEPATH%\PrintHood\~VUbYFpZ7hUAShRnUQhmW.TMP
%HOMEPATH%\PrintHood\~In9w2VJ51KokhwcNiGxf.TMP
%HOMEPATH%\PrintHood\~4zPEfyaOTDOizH8VhPl4.TMP
%HOMEPATH%\PrintHood\~upMOSoMEiv3RwIZIasCG.TMP
%HOMEPATH%\PrintHood\~TqKUwMXiOCOrV7OSRs9F.TMP
%HOMEPATH%\PrintHood\~13WXz1tVxe6OwTgxS1Wk.TMP
%HOMEPATH%\PrintHood\~2zis5o0ohpxmA2T0ZdSS.TMP
%HOMEPATH%\PrintHood\~YlDxRzzMkLocmhx8YZvf.TMP
%HOMEPATH%\PrintHood\~UXvLNnCycRvNH5PhhtO8.TMP
%HOMEPATH%\PrintHood\~ALeWAVnEG0Cui1tntZeM.TMP
%HOMEPATH%\PrintHood\~DA6PucRZKTybvVvgwHmm.TMP
%HOMEPATH%\PrintHood\~Ymf6ATkD48AfnsVMCuH2.TMP
%HOMEPATH%\PrintHood\~LXGKI6NqctDE0OQfGSjQ.TMP
%HOMEPATH%\PrintHood\~uNXz1Kv05dgVsRAa5Jti.TMP
%HOMEPATH%\PrintHood\~JQ6eAdfDQ82ZQqFiDAMk.TMP
%HOMEPATH%\PrintHood\~c7jM34iQEXCY26Ul3ZHW.TMP
%HOMEPATH%\PrintHood\~M9YwnQbJsiXomKY4UJEH.TMP
%HOMEPATH%\PrintHood\~jat9AAftfjfJ74BJJ742.TMP
%HOMEPATH%\PrintHood\~hrlaJhb4pCz3o1DK06iW.TMP
%HOMEPATH%\PrintHood\~stM86c6Wi5BPfzDheBlA.TMP
%HOMEPATH%\PrintHood\~NRx95McgQBanceAc1WuI.TMP
%HOMEPATH%\PrintHood\~3bYNA7FJ4QJrCHIgcj5M.TMP
%HOMEPATH%\PrintHood\~Sqin3FZ1lmYfhSiTCwZX.TMP
%HOMEPATH%\PrintHood\~OfH1fiEue3EqwIrzQV6z.TMP
%HOMEPATH%\PrintHood\~VhxAssKxeAQC8amYPVpp.TMP
%HOMEPATH%\PrintHood\~p53hZ4hVEVp3E5si3898.TMP
%HOMEPATH%\PrintHood\~4gEi2pWXKoKb3VLAtnVD.TMP
%HOMEPATH%\PrintHood\~KVODW8UrtbY48RvLOnlD.TMP
%HOMEPATH%\PrintHood\~ETCpI1qvadgZwPYDCrFM.TMP
%HOMEPATH%\PrintHood\~icLzIjGlcAvVx3mgoloj.TMP
%HOMEPATH%\PrintHood\~gc7z1DVwwseo3iKp8oto.TMP
%HOMEPATH%\PrintHood\~DMh9OihcLqunKOflHe7Z.TMP
%HOMEPATH%\PrintHood\~UqagF1vAKgyWAWxht3MF.TMP
%HOMEPATH%\PrintHood\~nUH1gWA0CXJ5pGlqtZ7G.TMP
%HOMEPATH%\PrintHood\~37sSYvX5jRNcSnFnFjIx.TMP
%HOMEPATH%\PrintHood\~X7ZsyCgdtaXxgKaGAh0l.TMP
%HOMEPATH%\PrintHood\~RSEFhfNxnAvCmSjVMbJX.TMP
%HOMEPATH%\PrintHood\Z3eMXGM5cs.dll
%HOMEPATH%\PrintHood\AE7doQ3O4H.dll
%HOMEPATH%\PrintHood\uKa2G9mthH.dll
%HOMEPATH%\PrintHood\aCa2TUrWou.dll
%HOMEPATH%\PrintHood\CyvKJY0Ewt.dll
%HOMEPATH%\PrintHood\QlCwW7mIMT.dll
%HOMEPATH%\PrintHood\KnuXu5LVeC.dll
%HOMEPATH%\PrintHood\SFiyWCeqjZ.dll
%HOMEPATH%\PrintHood\fdPjEk3yjB.dll
%HOMEPATH%\PrintHood\rWHE9mdq7b.dll
%HOMEPATH%\PrintHood\womUaY5x8u.dll
%HOMEPATH%\PrintHood\seXVWTDxB7.dll
%HOMEPATH%\PrintHood\XUEL3ctWZ5.dll
%HOMEPATH%\PrintHood\GwwEz5y7Xg.dll
%HOMEPATH%\PrintHood\8tkWzbyPQL.dll
%HOMEPATH%\PrintHood\YvWGkcBt1m.dll
%HOMEPATH%\PrintHood\Dp7Ztknrre.dll
%HOMEPATH%\PrintHood\TdHhNlmSWk.dll
%HOMEPATH%\PrintHood\2OGubd9D6p.dll
%HOMEPATH%\PrintHood\jPrYcf7m5L.dll
%HOMEPATH%\PrintHood\oQYvvckp21.dll
%HOMEPATH%\PrintHood\I5WSNoZfK2.dll
%HOMEPATH%\PrintHood\yGjsp99w66.dll
%HOMEPATH%\PrintHood\pjdYT1skRA.dll
%HOMEPATH%\PrintHood\pangtip.bat
%HOMEPATH%\PrintHood\UPDATE~1.EXE.pkxm
%HOMEPATH%\PrintHood\gKTDMA05Ps.dll
%HOMEPATH%\Templates\nam.dll
%HOMEPATH%\PrintHood\m646YWpw92.dll
%HOMEPATH%\PrintHood\weySbUPjS6.dll
%HOMEPATH%\PrintHood\J07AMMrf46.dll
%HOMEPATH%\PrintHood\9lqgvit4KT.dll
%HOMEPATH%\PrintHood\TE21r5B7g9.dll
%HOMEPATH%\PrintHood\8gGDSbvIem.dll
%HOMEPATH%\PrintHood\XUzXFs3EME.dll
%HOMEPATH%\PrintHood\D5iKgUiYs1.dll
%HOMEPATH%\PrintHood\X51rjcxZdG.dll
%HOMEPATH%\PrintHood\tvO7XFWV55.dll
%HOMEPATH%\PrintHood\yN9DihRM80.dll
%HOMEPATH%\PrintHood\wBajvvvYYd.PRI
%HOMEPATH%\PrintHood\QUUmFV576O.PRI
%HOMEPATH%\PrintHood\C3f0wy2oHC.PRI
%HOMEPATH%\PrintHood\F7UGUndq0n.PRI
%HOMEPATH%\PrintHood\nhjgnp2YXu.PRI
%HOMEPATH%\PrintHood\VpUrqHiHBW.PRI
%HOMEPATH%\PrintHood\lbz6i03lzL.PRI
%HOMEPATH%\PrintHood\mCpGj8x2ob.PRI
%HOMEPATH%\PrintHood\UpaETG4i6c.PRI
%HOMEPATH%\PrintHood\vv3PuwLSrY.PRI
%HOMEPATH%\PrintHood\vdCMxzA30B.PRI
%HOMEPATH%\PrintHood\P9LkrIphW2.PRI
%HOMEPATH%\PrintHood\mtSlr5rFTR.PRI
%HOMEPATH%\PrintHood\GoV9q3wmmo.PRI
%HOMEPATH%\PrintHood\Vi1iKLYjGo.PRI
%HOMEPATH%\PrintHood\8O5G6tnT9U.PRI
%HOMEPATH%\PrintHood\HJcFm8HIDg.PRI
%HOMEPATH%\PrintHood\iQ3qg3H94W.PRI
%HOMEPATH%\PrintHood\oiX9jd4Y4M.PRI
%HOMEPATH%\PrintHood\M3s2ZMsuTw.dll
%HOMEPATH%\PrintHood\UgXkbJ0wff.dll
%HOMEPATH%\PrintHood\cboRRSEK1L.dll
%HOMEPATH%\PrintHood\muNLyCtmya.dll
%HOMEPATH%\PrintHood\zP3BVvUPif.dll
%HOMEPATH%\PrintHood\HbgXZodgyN.dll
%HOMEPATH%\PrintHood\w4SBDHtoSp.dll
%HOMEPATH%\PrintHood\vMIhuddhNT.dll
%HOMEPATH%\PrintHood\DMtSu80RHB.dll
%HOMEPATH%\PrintHood\tHprqvE9wR.dll
%HOMEPATH%\PrintHood\emhmnZe7Zr.PRI
%HOMEPATH%\PrintHood\lSBfWNWtrL.PRI
%HOMEPATH%\PrintHood\33mpxarRRa.PRI
%HOMEPATH%\PrintHood\TrwSSiANxF.PRI
%HOMEPATH%\PrintHood\GF226m011w.dll
%HOMEPATH%\PrintHood\TwkFe8N4pJ.dll
%HOMEPATH%\PrintHood\KPxKT1ZimQ.dll
%HOMEPATH%\PrintHood\GfLtsvwXMQ.dll
%HOMEPATH%\PrintHood\2xYYa3IdO7.dll
%HOMEPATH%\PrintHood\~H5FJWvc8aa7lnssflViI.TMP
%HOMEPATH%\PrintHood\~0itKdtPW6keMay2X8z0M.TMP
%HOMEPATH%\PrintHood\~l1qEDCY01qhuUOfa3wqz.TMP
%HOMEPATH%\PrintHood\~9PMjB60xKpnfOgrG6NDG.TMP
%HOMEPATH%\PrintHood\~xN3b8ORlupg9fWU0PxOO.TMP
%HOMEPATH%\PrintHood\~r5bdITcyjxV7yVAoDDu7.TMP
%HOMEPATH%\PrintHood\~Km9Me49HBIQrIAlFnCRt.TMP
%HOMEPATH%\PrintHood\~ntWA2gFo3OYveVnZNTH1.TMP
%HOMEPATH%\PrintHood\~joOKac8QAUX7n8lscslB.TMP
%HOMEPATH%\PrintHood\~1r3hfs7rCacdTy0dRSf4.TMP
%HOMEPATH%\PrintHood\~Dj7Z9geuQ7jCFvzsjvDe.TMP
%HOMEPATH%\PrintHood\~ioHLyG7ySqidSVim7Zf3.TMP
%HOMEPATH%\PrintHood\~72HRyu8Y22oljPdLt3CE.TMP
%HOMEPATH%\PrintHood\~IbSxwUQhEcIq7seXxMqH.TMP
%HOMEPATH%\PrintHood\~JqB8o4YXO4DMtVv1NHAe.TMP
%HOMEPATH%\PrintHood\~K0uptzKr8mRbjv8EWW8D.TMP
%HOMEPATH%\PrintHood\~onQMiVCgurtCCKBIAwfO.TMP
%HOMEPATH%\PrintHood\~xL34VdVy0LEqipzMLRUm.TMP
%HOMEPATH%\PrintHood\~St3EGtKyLullcTINjsfl.TMP
%HOMEPATH%\PrintHood\~6VQf4oeuwARXrczKIAcR.TMP
%HOMEPATH%\PrintHood\~TCccXc0Wg1ELLFjcWfkw.TMP
%HOMEPATH%\PrintHood\~gU2E3dKLR1hu0FMAOFv2.TMP
%HOMEPATH%\PrintHood\~76je375Km9iKt4ZUOLim.TMP
%HOMEPATH%\PrintHood\~STmsKVmPZiunHVE7X0le.TMP
%HOMEPATH%\PrintHood\~F3PTGOucTthL1qq8xBGZ.TMP
%HOMEPATH%\PrintHood\~6AsDTj5u77LPzvm7AXco.TMP
%HOMEPATH%\PrintHood\~x7xg5SzlIpkLrFo4wBA5.TMP
%HOMEPATH%\PrintHood\~fmfPXgB2WRlohtHbP3xx.TMP
%HOMEPATH%\PrintHood\~BkzoKeIpe0dvdepFHuyu.TMP
%HOMEPATH%\PrintHood\~G49Ab1tFaeMYiu52V8aT.TMP
%HOMEPATH%\PrintHood\~pMhfa8iFX0UUh0cHAmbR.TMP
%HOMEPATH%\PrintHood\~ttSFblWySsYgY2iSfhYg.TMP
%HOMEPATH%\PrintHood\~0uYkMMAB5lBK0MF6frmF.TMP
%HOMEPATH%\PrintHood\~DNEeVitgDeKJlPZt6I6B.TMP
%HOMEPATH%\PrintHood\~WyXYQ4y2iqXxBaViFPjR.TMP
%HOMEPATH%\PrintHood\~Z53YzPUtTp96EsjCJbAF.TMP
%HOMEPATH%\PrintHood\~uOfgjuc98Qtpx8RsbiTZ.TMP
%HOMEPATH%\PrintHood\~ai9jxpzIHMCrEJ6FBuVZ.TMP
%HOMEPATH%\PrintHood\~Ni0OfdJfXnnmjwmzT6gU.TMP
%HOMEPATH%\PrintHood\~ndpnlxHxab0JDh3vfo4H.TMP
%HOMEPATH%\PrintHood\~YuBQxnxlHEMLzSDNi2i6.TMP
%HOMEPATH%\PrintHood\~MsTJBC0j4KiskCY1k75l.TMP
%HOMEPATH%\PrintHood\~iHNmFRJ7ml3WT92ZqBxm.TMP
%HOMEPATH%\PrintHood\~z5Wz0njYs9qsNlwNzKmq.TMP
%HOMEPATH%\PrintHood\~LCWYPTtLSWTyThnEA4xO.TMP
%HOMEPATH%\PrintHood\~LZYPX8bU1tFoByi944FX.TMP
%HOMEPATH%\PrintHood\~fTNTwXAIVeWNE9WjDQwv.TMP
%HOMEPATH%\PrintHood\~e4X7j0i0KoxlSVXapHiK.TMP
%HOMEPATH%\PrintHood\~yqd1IxvkZYqscqqphVWZ.TMP
%HOMEPATH%\PrintHood\~du8QBbVTkR0MJV6BoAEG.TMP
%HOMEPATH%\PrintHood\datikal.dll
%HOMEPATH%\PrintHood\~Exut0SFvNXoqKBLwflHx.TMP
%HOMEPATH%\PrintHood\UpdateOffice.exe
%HOMEPATH%\PrintHood\700.bat
%HOMEPATH%\PrintHood\~5wocwMkDCqLcAwGR2ptw.TMP
%HOMEPATH%\PrintHood\~SX7U8S1C4y37u77q7Zgi.TMP
%HOMEPATH%\PrintHood\~y8JxjyIyb6e9UypgHLEo.TMP
%HOMEPATH%\PrintHood\~1iM7yTUodhqPJDZresbA.TMP
%HOMEPATH%\PrintHood\~6MI2flH5KMnMXzlHA95T.TMP
%HOMEPATH%\PrintHood\~WjIrMRNOmv9uKTJ2moiI.TMP
%HOMEPATH%\PrintHood\~KptVd3FkI8vYOz1YUnIu.TMP
%HOMEPATH%\PrintHood\~c4AHCW74Xh3VkWOCSKsv.TMP
%HOMEPATH%\PrintHood\~HRvwYfzC5NskrtrQLGnY.TMP
%HOMEPATH%\PrintHood\~Muj6mF4ioOPTMOL8yqax.TMP
%HOMEPATH%\PrintHood\~jBgnjoCyxEvA7Eol6vlx.TMP
%HOMEPATH%\PrintHood\~89xbCLO1euJiM4OGEO0X.TMP
%HOMEPATH%\PrintHood\~bT7k1Wf76J3B1QMpKVNX.TMP
%HOMEPATH%\PrintHood\~OAaK39EOxqckg65LipQ2.TMP
%HOMEPATH%\PrintHood\~6qZmjfwXD0cJPEH9NLgt.TMP
%HOMEPATH%\PrintHood\~qlQg0j20epE75x8LPS8k.TMP
%HOMEPATH%\PrintHood\~DWMJazODAXUvd5pSp1NT.TMP
%HOMEPATH%\PrintHood\~mjhzyGIdchMzRe22fM9p.TMP
%HOMEPATH%\PrintHood\~bFjTxOEwqbBgkLhJFuyj.TMP
%HOMEPATH%\PrintHood\~lPWCy6cVJhPpZ0Gx3LQ2.TMP
%HOMEPATH%\PrintHood\~kZBxU8FXBNEzAFd9JBrH.TMP
%HOMEPATH%\PrintHood\~V0WXT0WBYsVnyrPgunzr.TMP
%HOMEPATH%\PrintHood\~3Uhf0rRitPKPQiSeg3hL.TMP
%HOMEPATH%\PrintHood\~YEB1pIKpOSRVkP7UjpMy.TMP
%HOMEPATH%\PrintHood\~Cp5ujmJoqGoDQuOMzrJA.TMP
%HOMEPATH%\PrintHood\~imm6hSz4Gy5JCWvgSDAY.TMP
%HOMEPATH%\PrintHood\~QR4nEHJikY15NBmrOPgq.TMP
%HOMEPATH%\PrintHood\~Tr6XIDPZ5fSXhMq0H2nW.TMP
%HOMEPATH%\PrintHood\~SZMbxCV81EsSUDBZUrmK.TMP
%HOMEPATH%\PrintHood\~5mwpiFF1uYz6eO29DgNE.TMP
%HOMEPATH%\PrintHood\~5fNAsCEghY0NMys8Oi6L.TMP
%HOMEPATH%\PrintHood\~rGd86pNUnFTM6ZmaxwSD.TMP
%HOMEPATH%\PrintHood\~q2MRtksbOlEhCOT20jNT.TMP
%HOMEPATH%\PrintHood\~S4oPpOL8stCTirwTUoJ0.TMP
%HOMEPATH%\PrintHood\~BOohO5T8TOgCpSTraK1T.TMP
%HOMEPATH%\PrintHood\~JHYTmb0Pqeknc5KNzpXw.TMP
%HOMEPATH%\PrintHood\~DPdYie55sgU8DuNeQ5aa.TMP
%HOMEPATH%\PrintHood\~QjHAO2LEzEMwJLtm3KXg.TMP
%HOMEPATH%\PrintHood\~WyLo5P2hiIrGWzBaPCNU.TMP
%HOMEPATH%\PrintHood\~oCgH6tefP3uMwvTIoINv.TMP
%HOMEPATH%\PrintHood\~2hw2JJoI2I4nqPnLj9Bx.TMP
%HOMEPATH%\PrintHood\~fY9USWNaaAQzUpetbWrl.TMP
%HOMEPATH%\PrintHood\~rySP4ObFyDDEiQlc9scu.TMP
%HOMEPATH%\PrintHood\~5XhRbHBKKA2603eatJlN.TMP
%HOMEPATH%\PrintHood\~ELIyrASFv7HxyDti7u5D.TMP
%HOMEPATH%\PrintHood\~E44ARK9G4C47MB01jdMp.TMP
%HOMEPATH%\PrintHood\~r3j9sXLPqPHyCbH1rwxD.TMP
%HOMEPATH%\PrintHood\~pG8X8qOjsyxhbmkt8T0H.TMP
%HOMEPATH%\PrintHood\~cFpFgHUpnTuRJGwgcRXP.TMP
%HOMEPATH%\PrintHood\~1MX4XRN2mVqMxe0JAYJN.TMP
%HOMEPATH%\PrintHood\~y61XQd7RH3f9JyLX3YuS.TMP
%HOMEPATH%\PrintHood\~7r0iCBV11V2h9KmiLl59.TMP
%HOMEPATH%\PrintHood\~zSVVV1aoLMOCr62cl3yg.TMP
%HOMEPATH%\PrintHood\~9cNyGYWejeglFsrFv5ts.TMP
%HOMEPATH%\PrintHood\~kewe1JPBlCKywHk7OAYX.TMP
%HOMEPATH%\PrintHood\~owgSqKWPcPa5Gj1uy8uE.TMP
%HOMEPATH%\PrintHood\~Iz1aFE4B2zlUFk7nyBeA.TMP
%HOMEPATH%\PrintHood\~lQFLqYWcPHK9qG940IjH.TMP
%HOMEPATH%\PrintHood\~b28BvXnoaHErYemZBOUo.TMP
%HOMEPATH%\PrintHood\~HmzOAe3qRhAHIKHWC2BC.TMP
%HOMEPATH%\PrintHood\~ERDOMmxeYpn8IN9l0Exw.TMP
%HOMEPATH%\PrintHood\~mkaars2HqY1uzSsdKWV2.TMP
%HOMEPATH%\PrintHood\~Mhk1z4hFce8i2Unx9zNF.TMP
%HOMEPATH%\PrintHood\~E6kHtRkOm8CF4YE0bYos.TMP
%HOMEPATH%\PrintHood\~9aeCt0s0UpTmWf1kKeYJ.TMP
%HOMEPATH%\PrintHood\~J4xim2NwJ3Qg0KaWZ76F.TMP
%HOMEPATH%\PrintHood\~TAM4o99sFoH8GLK1BLWu.TMP
%HOMEPATH%\PrintHood\~mMbHgaXm3D5fWPoHiQV1.TMP
%HOMEPATH%\PrintHood\~ktZ2OKvQMx5zQGOX19d5.TMP
%HOMEPATH%\PrintHood\~GJKAJJUNdqEA7KIEKpk4.TMP
%HOMEPATH%\PrintHood\~FTGMzelF3Xgh1Np3L6XO.TMP
%HOMEPATH%\PrintHood\~irMpauQqcaYyt5JxbKEq.TMP
%HOMEPATH%\PrintHood\~uUwo10qfY1E5Y1k5NGFZ.TMP
%HOMEPATH%\PrintHood\~iIF0AiDdPBfEHUTIUlk0.TMP
%HOMEPATH%\PrintHood\~nK8UFq4dHJzXdT3qcpfx.TMP
%HOMEPATH%\PrintHood\~RZ1W230zIRfC6FdjyJ17.TMP
%HOMEPATH%\PrintHood\~uYCME85SuSOw5yTAShU1.TMP
%HOMEPATH%\PrintHood\~OtMx5GiAkEWHdMe2MICe.TMP
%HOMEPATH%\PrintHood\~wAxai1X48EHL7wijVyQR.TMP
%HOMEPATH%\PrintHood\~fFVCqNf1yi96WFepp5P4.TMP
%HOMEPATH%\PrintHood\~B0yKBBNo4m7S8fQvOYSD.TMP
%HOMEPATH%\PrintHood\~JhUMFhzr1svO6FXV0PLT.TMP
%HOMEPATH%\PrintHood\~0AoOjj3VbTpN62tLS47C.TMP
%HOMEPATH%\PrintHood\~2T19lnRxgfn2m4g7p5ym.TMP
%HOMEPATH%\PrintHood\~rGtSH4OpVygz2gF45fHT.TMP
%HOMEPATH%\PrintHood\~CMimAqXIyb9V7Y34XNpz.TMP
%HOMEPATH%\PrintHood\~55ZPRHUC9GPAi6h89AVL.TMP
%HOMEPATH%\PrintHood\~ERcDO7Go6Hv7O4zxMEAT.TMP
%HOMEPATH%\PrintHood\~VcQT3QooABsUSmSguV3d.TMP
%HOMEPATH%\PrintHood\~lVAiS1I7cxZ0uETIeTKE.TMP
%HOMEPATH%\PrintHood\~Yus74VVBmPQTsQfCUaZP.TMP
%HOMEPATH%\PrintHood\~jJzsswTw7R5aRKJei2l5.TMP
%HOMEPATH%\PrintHood\~fxeAq9YbGrdycwY4mZf2.TMP
%HOMEPATH%\PrintHood\~lghPpJrYQrNJxUe5oI66.TMP
%HOMEPATH%\PrintHood\~LdnR5xBDLtJriQBBCpWM.TMP
%HOMEPATH%\PrintHood\~4pB07s3IWzE7cbjCavH0.TMP
%HOMEPATH%\PrintHood\~DA1k6MOAvi6bZuiJmOgT.TMP
%HOMEPATH%\PrintHood\~Gy2EL0dpxEsi86Ta84KO.TMP
%HOMEPATH%\PrintHood\~lBus5sBDwGvcOMwCA5Xi.TMP
%HOMEPATH%\PrintHood\~rVPoWGmXXZwzypeKMOwR.TMP
%HOMEPATH%\PrintHood\~f1sF0pAG8698O6optxFe.TMP

Удаляет следующие файлы:

%HOMEPATH%\PrintHood\pangtip.bat

Сетевая активность:

Подключается к:

'localhost':1039
'localhost':1040
'localhost':1041
'localhost':1038
'localhost':1035
'localhost':1036
'localhost':1037

Другое:

Ищет следующие окна:

ClassName: '' WindowName: 'http://174.142.57.28/ - 404 - File or directory not found. - Windows Internet Explorer'
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: '' WindowName: '404 - File or directory not found. - Microsoft Internet Explorer'
ClassName: '' WindowName: 'http://174.142.57.28/ - 404 - File or directory not found. - Microsoft Internet Explorer'
ClassName: '' WindowName: '404 - File or directory not found. - Windows Internet Explorer'
ClassName: '' WindowName: 'u!u!u!u! - Microsoft Internet Explorer'
ClassName: '' WindowName: 'http://174.142.57.28/ - u!u!u!u! - Windows Internet Explorer'
ClassName: '' WindowName: 'u!u!u!u! - Windows Internet Explorer'
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: '' WindowName: ''
ClassName: '' WindowName: 'http://174.142.57.28/ - u!u!u!u! - Microsoft Internet Explorer'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней